Welcome to Splunk Answers, a Q&A forum for users to find answers to questions about deploying, managing, and using Splunk products. Contributors of all backgrounds and levels of expertise come here to find solutions to their issues, and to help other users in the Splunk community with their own questions.

This quick tutorial will help you get started with key features to help you find the answers you need. You will receive 10 karma points upon successful completion!

Refine your search:

Splunk 6 Flashtimeline Conversion to Search - Assigning Chart Title

0

We used the flashtimeline view heavily in Splunk 5. Now that we are looking to upgrade to Splunk 6 it appears that some of the features are not backwards compatible using the search view that is now redirected from flashtimeline.

Does anyone know how to assign the Chart Title when using the search view? This used to be done via the c.title querystring parameter in Splunk 5 for the flashtimeline view.

People who like this

2 Answers

What are you trying to do? Are you trying to provide a title when entering into the search view for a custom workflow?

I don't believe that we still provide for a title specifically for the chart in either the search view or a report. You can, however, save a specific search and chart as a report. When that report is opened in either the report view /app//report or the search view /app//search a title will be prominently displayed for the whole report.

More generally, we did not account for any of the c.* query string arguments when coming into either the search or the report view.

@arobbins_splunk - we have too many dynamic searches to create a report for each view. We have drill-downs from advanced XML dashboards that make use of this chart title extensively for user context. We can't statically define a report for each custom search we create since it's entirely data driven. Is the title something we can add back in our self (overriding the system template) - or do we need to create a custom search template? We'd rather not recreate the parameterized view.

Just observed the new report view in Splunk 6...this is exactly what we'd like to use for dynamic viewing of drill-downs. If we had a searchreport that combined the best of both worlds. We have no use for the search bar - but love the heading that report view provides (e.g. search title and description).

Another option you could possibly use: make a templatized simple XML page. The first panel could be an HTML panel with $name$, the page level search could be $search$ and the second and third panels could be a chart and table that use the page level search. Check out the Splunk 6 Dashboard Examples App on apps.splunk.com to see a variety of examples (nothing quite like what you're looking for, but enough building blocks to put it together). If you want to explore this method, let me know and I'll point our Simple XML experts at this question.

@Doc-Yes - thanks for sharing the values - however Axis Titles are not the same as Chart Title. Chart Title appears above the Chart to provide context as to what the user is seeing in the graph below it.